Server crashes in spider_db_open_item_field

INSTALL SONAME 'ha_spider';

SET spider_same_server_link= 1;

eval CREATE SERVER srv FOREIGN DATA WRAPPER mysql

OPTIONS (SOCKET "$MASTER_MYSOCK", DATABASE 'test', USER 'root');

CREATE TABLE t1 (a INT, b INT);

INSERT INTO t1 VALUES (1,1),(2,2);

CREATE TABLE t1_s (a INT, b INT) ENGINE=SPIDER

  WRAPPER=mariadb REMOTE_SERVER=srv REMOTE_TABLE=t1;

SELECT 1 WHERE (1,1) IN (SELECT a, b FROM t1_s);

DROP TABLE t1_s, t1;

DROP SERVER srv;

#4  <signal handler called>

#5  0x00007fb6287455fd in spider_db_open_item_field (item_field=item_field@entry=0x62d0006e0448, spider=spider@entry=0x62500096a160, str=str@entry=0x6190000cf8e0, alias=alias@entry=0x0, alias_length=alias_length@entry=0, dbton_id=dbton_id@entry=1, use_fields=<optimized out>, fields=<optimized out>) at /data/bld/testing/bb-blob-main-monty-asan/storage/spider/spd_db_conn.cc:7283

#6  0x00007fb628748727 in spider_db_print_item_type (item=0x62d0006e0448, field=field@entry=0x0, spider=spider@entry=0x62500096a160, str=str@entry=0x6190000cf8e0, alias=alias@entry=0x0, alias_length=alias_length@entry=0, dbton_id=<optimized out>, use_fields=<optimized out>, fields=<optimized out>) at /data/bld/testing/bb-blob-main-monty-asan/storage/spider/spd_db_conn.cc:6928

#7  0x00007fb6288c2aa3 in spider_db_mbase_util::print_item_func (this=this@entry=0x7fb628a12e20 <spider_db_mariadb_utility>, item_func=item_func@entry=0x62d000109710, spider=spider@entry=0x62500096a160, str=str@entry=0x6190000cf8e0, alias=alias@entry=0x0, alias_length=alias_length@entry=0, use_fields=<optimized out>, fields=<optimized out>) at /data/bld/testing/bb-blob-main-monty-asan/storage/spider/spd_db_mysql.cc:6038

#8  0x00007fb6288c3168 in spider_db_mbase_util::open_item_func (this=<optimized out>, item_func=<optimized out>, spider=<optimized out>, str=0x6190000cf8e0, alias=<optimized out>, alias_length=<optimized out>, use_fields=<optimized out>, fields=<optimized out>) at /data/bld/testing/bb-blob-main-monty-asan/storage/spider/spd_db_mysql.cc:4838

#9  0x00007fb628743789 in spider_db_open_item_func (item_func=item_func@entry=0x62d000109710, spider=spider@entry=0x62500096a160, str=str@entry=0x6190000cf8e0, alias=alias@entry=0x0, alias_length=alias_length@entry=0, dbton_id=dbton_id@entry=1, use_fields=<optimized out>, fields=<optimized out>) at /data/bld/testing/bb-blob-main-monty-asan/storage/spider/spd_db_conn.cc:7088

#10 0x00007fb6287485a5 in spider_db_print_item_type (item=item@entry=0x62d000109710, field=field@entry=0x0, spider=spider@entry=0x62500096a160, str=str@entry=0x6190000cf8e0, alias=alias@entry=0x0, alias_length=alias_length@entry=0, dbton_id=<optimized out>, use_fields=<optimized out>, fields=<optimized out>) at /data/bld/testing/bb-blob-main-monty-asan/storage/spider/spd_db_conn.cc:6919

#11 0x00007fb628748ea0 in spider_db_open_item_cond (item_cond=item_cond@entry=0x62d00010a040, spider=spider@entry=0x62500096a160, str=str@entry=0x6190000cf8e0, alias=alias@entry=0x0, alias_length=alias_length@entry=0, dbton_id=dbton_id@entry=1, use_fields=<optimized out>, fields=<optimized out>) at /data/bld/testing/bb-blob-main-monty-asan/storage/spider/spd_db_conn.cc:7022

#12 0x00007fb6287486b9 in spider_db_print_item_type (item=item@entry=0x62d00010a040, field=field@entry=0x0, spider=<optimized out>, str=<optimized out>, alias=alias@entry=0x0, alias_length=alias_length@entry=0, dbton_id=<optimized out>, use_fields=<optimized out>, fields=<optimized out>) at /data/bld/testing/bb-blob-main-monty-asan/storage/spider/spd_db_conn.cc:6925

#13 0x00007fb6288a9755 in spider_mbase_handler::append_item_type_part (this=0x6190000cf880, item=<optimized out>, alias=<optimized out>, alias_length=<optimized out>, use_fields=<optimized out>, fields=<optimized out>, sql_type=<optimized out>) at /data/bld/testing/bb-blob-main-monty-asan/storage/spider/spd_db_mysql.cc:13641

#14 0x00007fb62890856e in spider_make_query (query=..., fields=0x60e0000815a0, spider=0x62500096a160, table=<optimized out>) at /data/bld/testing/bb-blob-main-monty-asan/storage/spider/spd_group_by_handler.cc:1123

#15 0x00007fb62890a38f in spider_group_by_handler::init_scan (this=0x610000018140) at /data/bld/testing/bb-blob-main-monty-asan/storage/spider/spd_group_by_handler.cc:1288

#16 0x0000563fe1938392 in Pushdown_query::execute (this=0x62d00010bfe8, join=join@entry=0x62d000107d70) at /data/bld/testing/bb-blob-main-monty-asan/sql/group_by_handler.cc:49

#17 0x0000563fe1819842 in do_select (join=join@entry=0x62d000107d70, procedure=<optimized out>) at /data/bld/testing/bb-blob-main-monty-asan/sql/sql_select.cc:24633

#18 0x0000563fe1885845 in JOIN::exec_inner (this=this@entry=0x62d000107d70) at /data/bld/testing/bb-blob-main-monty-asan/sql/sql_select.cc:5131

#19 0x0000563fe1885b7f in JOIN::exec (this=0x62d000107d70) at /data/bld/testing/bb-blob-main-monty-asan/sql/sql_select.cc:4919

#20 0x0000563fe236231d in subselect_single_select_engine::exec (this=0x62d000106928) at /data/bld/testing/bb-blob-main-monty-asan/sql/item_subselect.cc:4201

#21 0x0000563fe2365efa in Item_subselect::exec (this=this@entry=0x62d0001065f0) at /data/bld/testing/bb-blob-main-monty-asan/sql/item_subselect.cc:813

#22 0x0000563fe236d7ef in Item_in_subselect::exec (this=0x62d0001065f0) at /data/bld/testing/bb-blob-main-monty-asan/sql/item_subselect.cc:995

#23 0x0000563fe235d429 in Item_in_subselect::val_bool (this=0x62d0001065f0) at /data/bld/testing/bb-blob-main-monty-asan/sql/item_subselect.cc:2011

#24 0x0000563fe12e7d16 in Item::val_bool_result (this=<optimized out>) at /data/bld/testing/bb-blob-main-monty-asan/sql/item.h:1839

#25 0x0000563fe21b4db5 in Item_in_optimizer::val_bool (this=0x62d0001084e8) at /data/bld/testing/bb-blob-main-monty-asan/sql/item_cmpfunc.cc:1796

#26 0x0000563fe188d2c3 in Item::eval_const_cond (this=this@entry=0x62d0001084e8) at /data/bld/testing/bb-blob-main-monty-asan/sql/item.h:1748

#27 0x0000563fe17b7e6b in Item::remove_eq_conds (this=0x62d0001084e8, thd=<optimized out>, cond_value=0x62d0001077d8, top_level_arg=<optimized out>) at /data/bld/testing/bb-blob-main-monty-asan/sql/sql_select.cc:21302

#28 0x0000563fe17c54f7 in optimize_cond (join=join@entry=0x62d000107440, conds=0x62d0001084e8, join_list=<optimized out>, ignore_on_conds=ignore_on_conds@entry=false, cond_value=cond_value@entry=0x62d0001077d8, cond_equal=cond_equal@entry=0x62d000107900, flags=<optimized out>) at /data/bld/testing/bb-blob-main-monty-asan/sql/sql_select.cc:20844

#29 0x0000563fe187def0 in JOIN::optimize_inner (this=this@entry=0x62d000107440) at /data/bld/testing/bb-blob-main-monty-asan/sql/sql_select.cc:2478

#30 0x0000563fe1880e0a in JOIN::optimize (this=this@entry=0x62d000107440) at /data/bld/testing/bb-blob-main-monty-asan/sql/sql_select.cc:2016

#31 0x0000563fe1881551 in mysql_select (thd=thd@entry=0x62c0000b0220, tables=<optimized out>, fields=..., conds=<optimized out>, og_num=<optimized out>, order=<optimized out>, group=<optimized out>, having=<optimized out>, proc_param=<optimized out>, select_options=<optimized out>, result=<optimized out>, unit=<optimized out>, select_lex=<optimized out>) at /data/bld/testing/bb-blob-main-monty-asan/sql/sql_select.cc:5431

#32 0x0000563fe1881e3d in handle_select (thd=thd@entry=0x62c0000b0220, lex=lex@entry=0x62c0000b4860, result=result@entry=0x62d000107408, setup_tables_done_option=setup_tables_done_option@entry=0) at /data/bld/testing/bb-blob-main-monty-asan/sql/sql_select.cc:636

#33 0x0000563fe16b450d in execute_sqlcom_select (thd=thd@entry=0x62c0000b0220, all_tables=<optimized out>) at /data/bld/testing/bb-blob-main-monty-asan/sql/sql_parse.cc:6217

#34 0x0000563fe16d06d9 in mysql_execute_command (thd=thd@entry=0x62c0000b0220, is_called_from_prepared_stmt=is_called_from_prepared_stmt@entry=false) at /data/bld/testing/bb-blob-main-monty-asan/sql/sql_parse.cc:3991

#35 0x0000563fe16dddf9 in mysql_parse (thd=thd@entry=0x62c0000b0220, rawbuf=<optimized out>, length=<optimized out>, parser_state=parser_state@entry=0x7fb629d8c990) at /data/bld/testing/bb-blob-main-monty-asan/sql/sql_parse.cc:7945

#36 0x0000563fe16e1ac1 in dispatch_command (command=command@entry=COM_QUERY, thd=thd@entry=0x62c0000b0220, packet=packet@entry=0x629000267221 "SELECT 1 WHERE (1,1) IN (SELECT a, b FROM t1_s)", packet_length=packet_length@entry=47, blocking=blocking@entry=true) at /data/bld/testing/bb-blob-main-monty-asan/sql/sql_parse.cc:1903

#37 0x0000563fe16e6958 in do_command (thd=thd@entry=0x62c0000b0220, blocking=blocking@entry=true) at /data/bld/testing/bb-blob-main-monty-asan/sql/sql_parse.cc:1437

#38 0x0000563fe1b99ab0 in do_handle_one_connection (connect=<optimized out>, connect@entry=0x60b000004890, put_in_cache=put_in_cache@entry=true) at /data/bld/testing/bb-blob-main-monty-asan/sql/sql_connect.cc:1503

#39 0x0000563fe1b99fa6 in handle_one_connection (arg=arg@entry=0x60b000004890) at /data/bld/testing/bb-blob-main-monty-asan/sql/sql_connect.cc:1415

#40 0x0000563fe286f77f in pfs_spawn_thread (arg=0x6170000069a0) at /data/bld/testing/bb-blob-main-monty-asan/storage/perfschema/pfs.cc:2198

#41 0x00007fb6360a71f5 in start_thread (arg=<optimized out>) at ./nptl/pthread_create.c:442

#42 0x00007fb6361278ec in clone3 () at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81

commit 7f78019099e5cade252781b4d5f3fb666905cb7b

Author: Arcadiy Ivanov

Date:   Sat Jun 13 13:12:23 2026 -0400

    MDEV-38975: HEAP engine BLOB/TEXT/JSON/GEOMETRY support with indexable blob columns